frontend developer web security

Описание

Cognizant provides IT services, IT consulting, and business consulting and services. The company focuses on analyzing and securing browser-based applications, including web extensions, through cybersecurity assessments, threat detection, and process automation.

Задачи

Analyze web extension code using static and dynamic analysis techniques to detect security violations and malicious behavior

Perform JavaScript reverse engineering and debugging to understand complex or obfuscated codebases

Identify, document, and report security vulnerabilities, including root cause analysis and recommended remediation steps

Support the takedown and investigation of malicious browser extensions

Conduct regular code reviews and provide constructive feedback aligned with secure coding best practices

Analyze JavaScript code to identify malicious activities and reverse engineer the code when necessary

Define and implement detection rules and security patterns to identify violations at scale

Identify emerging threat patterns and share insights to enhance team detection capabilities

Drive innovative ideas, recommend improvements, and help design and implement automation for existing processes

Act as a technical consultant, providing guidance, clarification, and technical grooming to team members

Collaborate with cross-functional teams and maintain clear technical documentation

Contribute to continuous improvement of security workflows and tooling

Требования

Strong hands-on experience with JavaScript, including closures, prototypes, variable scope, hoisting, callbacks, and OOP principles

Hands-on experience with HTML and CSS

Knowledge of JSON, AJAX, and ES6/ES7 standards

Good understanding of Node.js and Webpack

Experience with front-end frameworks or libraries such as React, Angular, or jQuery

Strong code analysis, debugging, and reverse engineering skills, particularly in JavaScript applications

Ability to analyze JavaScript code and identify malicious activities effectively

Good communication skills and ability to work as a collaborative team player

English required

Nice to have: Cybersecurity experience or strong security knowledge, familiarity with DAST and SAST methodologies, knowledge of cybersecurity open-source tools such as Burp Suite and Nmap or similar tools, understanding of obfuscation and de-obfuscation techniques, experience writing technical and security assessment reports

Условия

English is required

Based in Lisbon, Portugal

Hybrid work schedule

#J-18808-Ljbffr